Privacy Policy
Last updated: 10 October 2026
This Privacy Policy explains how MBCS(“we”, “us”, “our”) collects, uses and shares information when you visit medicalbillingandcoding.services (the “Website”) or contact us through it.
This policy covers the Website only. Protected health information (PHI) we handle for clients under a signed Business Associate Agreement is governed by that agreement and by HIPAA, not by this policy. See our HIPAA Notice and BAA page.
Please do not send patient information through this Website
Our forms are designed for practice and business details only. Do not enter patient names, dates of birth, member IDs, medical record numbers, claim details or any other patient information. Our forms reject entries that look like patient information. Patient data is exchanged only after a Business Associate Agreement is signed, and only through the secure channels set up for that client.
Information we collect
Information you give us
When you request an assessment or contact us, we collect what you enter in the form, which can include:
- your name and job title
- practice or facility name
- work email address and phone number
- specialty, number of providers, current EHR or practice-management system, approximate monthly collections and the billing challenges you select
- any message you write
We also record which page the form was submitted from and the time of submission.
How you found us
To understand which pages and campaigns lead to enquiries, the Website keeps a small record of the first page you visited, the website that referred you (without its query string), and any campaign tags in the link you followed (for example “utm_source”). This record is held in your browser’s session storage. It is deleted when you close the tab, and it is sent to us only if you submit a form.
Information collected automatically
- Security and spam prevention. When a form is submitted, your IP address is converted into a one-way hashed key used to limit repeated submissions. The key is kept for 15 minutes. We do not store your IP address in readable form for this purpose. If enabled, Cloudflare Turnstile checks that a form is submitted by a person and not an automated program, and Cloudflare processes technical information about your browser to do so.
- Analytics. We use Google Analytics 4 (through Google Tag Manager) to understand how the Website is used, for example pages viewed, approximate location (country/region), device type, and clicks on buttons, phone numbers, email links and forms. Analytics events do not include the content of the forms you fill in. We use Microsoft Clarity to see aggregated usage patterns such as clicks and scrolling; form fields are masked so their contents are not recorded.
- Server logs. Our hosting provider records standard technical information (such as IP address, browser type and the pages requested) to operate and secure the Website.
Cookies and similar technologies
Google Analytics and Microsoft Clarity set cookies to tell visits apart. We do not use advertising cookies, and we have configured Google’s consent settings so that advertising storage, advertising user data and ad personalisation are turned off. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with the Google Analytics opt-out browser add-on.
How we use information
- to respond to your enquiry, prepare an assessment and discuss our services with you
- to follow up about the services you asked about
- to measure and improve the Website and our marketing
- to protect the Website against spam, abuse and security threats
- to meet legal obligations and enforce our terms
How we share information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with:
- Service providers who help us run the Website and our business, such as our website host, email provider, [CLIENT TO CONFIRM: CRM or automation tool, if the lead webhook is used], Google (analytics), Microsoft (Clarity) and Cloudflare (Turnstile). They may use the information only to provide their services to us.
- Legal and safety reasons: when required by law, or to protect our rights, users or the public.
- Business transfers: as part of a merger, acquisition or sale of assets, subject to this policy.
How long we keep information
We keep enquiries for up to 12 months after our last contact unless you become a client, in which case your contract governs. Analytics data is kept for 14 months.
Security
The Website is served over HTTPS and form submissions are protected against tampering and automated abuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your choices and rights
You can ask us to access, correct or delete the personal information you submitted through the Website, or to stop contacting you, by emailing privacy@medicalbillingandcoding.services. Depending on where you live, state privacy laws may give you additional rights. We will respond as required by applicable law and will not discriminate against you for exercising your rights.
Children
The Website is intended for healthcare businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
Links to other websites
The Website links to other sites, such as payer and government resources. Their privacy practices are governed by their own policies.
Changes to this policy
We may update this policy. The “Last updated” date shows when it last changed.
Contact us
Email:privacy@medicalbillingandcoding.services
Phone: +1 (737) 332-2245